General
- Target 2026-07-31_cd4df81783cf716ac53b4269cd2aba51_akira_glassworm_quasar-rat
- Size 9.6MB
- Sample260731-c1mdmsbd36
- SHA256 3f68ac85cb92d6bb803e1787f57eee7b4156eef706be65f3499cce4481ba5206
- MD5 cd4df81783cf716ac53b4269cd2aba51
- SHA1 2173e701473dd0201575fcd9ab6a9bbce39904ef
- SHA512 f8424dbef857a710a6ed0c1399b3199a26507489a4315fe879c08d4949bd9e86c029da94415f9893a6ce66b6a083c74bac4cf2009b6107bbab6b99127bb4be75
- SSDEEP 98304:HXc+a19vqQ7/vGvEfDYB9hnELBElvweC/1bfzRE:3g0t4BElYeCtu
- TLSH T134A67C53F61509DEC65BC23989B9223AB331B29922216FFB0D5C8E75AE137D18F1835C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_cd4df81783cf716ac53b4269cd2aba51_akira_glassworm_quasar-rat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_cd4df81783cf716ac53b4269cd2aba51_akira_glassworm_quasar-rat
- Size 9.6MB
- SHA256 3f68ac85cb92d6bb803e1787f57eee7b4156eef706be65f3499cce4481ba5206
- MD5 cd4df81783cf716ac53b4269cd2aba51
- SHA1 2173e701473dd0201575fcd9ab6a9bbce39904ef
- SHA512 f8424dbef857a710a6ed0c1399b3199a26507489a4315fe879c08d4949bd9e86c029da94415f9893a6ce66b6a083c74bac4cf2009b6107bbab6b99127bb4be75
- SSDEEP 98304:HXc+a19vqQ7/vGvEfDYB9hnELBElvweC/1bfzRE:3g0t4BElYeCtu
- TLSH T134A67C53F61509DEC65BC23989B9223AB331B29922216FFB0D5C8E75AE137D18F1835C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.